@voltro/plugin-chat 0.0.0-stage → 0.88.0

package/dist/service.js

@@ -0,0 +1,1411 @@
+import { ChatError as e, chatError as t } from "./errors.js";
+import { chatAdmissionsTable as n } from "./admissions.entity.js";
+import { chatEvidenceTable as r } from "./evidence.entity.js";
+import { CHAT_MAX_MESSAGE_VERSION as i } from "./contract.js";
+import { chatMediaTable as a } from "./media.entity.js";
+import { chatRetentionTable as o } from "./retention.entity.js";
+import { createChatTyping as s } from "./typing.js";
+import { chatChannelsTable as c } from "./channels.entity.js";
+import { chatMembersTable as l } from "./members.entity.js";
+import { chatMessagesTable as u } from "./messages.entity.js";
+import { Effect as d, Result as f } from "effect";
+import { and as p, eq as m, gt as h, gte as g, inSet as _, jsonField as v, lt as y, lte as b, or as x, queryFor as S } from "@voltro/database";
+import { StorageService as C } from "@voltro/plugin-storage";
+import { createHash as w, randomUUID as ee } from "node:crypto";
+import { SanctionsPort as te } from "@voltro/plugin-sanctions/port";
+import { PlayersPort as ne } from "@voltro/plugin-players/port";
+import { GuildMembershipPort as T } from "@voltro/plugin-guilds/port";
+import { PartyMembershipPort as re } from "@voltro/plugin-matchmaking/port";
+import { SocialBlockPort as ie } from "@voltro/plugin-social/port";
+// src/service.ts
+var E = (e) => w("sha256").update(JSON.stringify(e)).digest("hex"), D = (n) => n instanceof e ? n : t("unavailable"), O = (e) => d.tryPromise({
+	try: e,
+	catch: D
+}), k = (e) => d.try({
+	try: e,
+	catch: D
+}), A = (e) => {
+	if (typeof e != "string" || !e.trim() || e.length > 256 || e.includes("\0") || e === "~") throw t("invalid_input");
+}, j = (e) => {
+	if (e.type !== "user") throw t("identity_required");
+	return A(e.id), A(e.tenantId), e;
+}, M = (e) => {
+	let n = e instanceof Date ? e.getTime() : typeof e == "string" ? Date.parse(e) : NaN;
+	if (!Number.isSafeInteger(n) || n < 0) throw t("unavailable");
+	return n;
+}, N = (e) => e === null ? null : M(e), P = (e, n) => {
+	let r = e[n];
+	if (typeof r != "string") throw t("unavailable");
+	return r;
+}, F = (e) => e === !0 || e === 1, I = (e) => ({
+	id: P(e, "id"),
+	kind: e.kind,
+	refId: P(e, "refId"),
+	name: P(e, "name"),
+	slowModeMs: Number(e.slowModeMs),
+	retentionMs: e.retentionMs === null ? null : Number(e.retentionMs),
+	maxMembers: Number(e.maxMembers),
+	frozen: F(e.frozen),
+	createdAt: M(e.createdAt),
+	metadata: e.metadata
+}), L = (e) => ({
+	id: P(e, "id"),
+	channelId: P(e, "channelId"),
+	subjectId: P(e, "subjectId"),
+	role: e.role,
+	mutedUntil: N(e.mutedUntil),
+	lastReadAt: M(e.lastReadAt),
+	lastReadId: e.lastReadId === null ? null : P(e, "lastReadId"),
+	notify: F(e.notify),
+	metadata: e.metadata
+}), R = (e, t = !1) => ({
+	id: P(e, "id"),
+	channelId: P(e, "channelId"),
+	authorId: e.authorId,
+	kind: e.kind,
+	body: e.deletedAt !== null && !t ? "" : P(e, "body"),
+	payload: e.deletedAt !== null && !t ? {} : e.payload,
+	replyToId: e.replyToId,
+	editedAt: N(e.editedAt),
+	deletedAt: N(e.deletedAt),
+	flagged: F(e.flagged),
+	createdAt: M(e.createdAt),
+	version: Number(e.version),
+	metadata: e.metadata
+}), z = (w, z, ae) => {
+	let B = () => {
+		let e = z.now();
+		if (!Number.isSafeInteger(e) || e < 0 || e > 864e13) throw t("unavailable");
+		return e;
+	}, oe = (e) => {
+		if (typeof e != "string" || !e.trim() || [...e].length > z.maxBodyLength || /[\u0000-\u0008\u000b\u000c\u000e-\u001f]/u.test(e)) throw t("invalid_input");
+		return e;
+	}, V = (e, t, n) => "cmem_" + E([
+		e,
+		t,
+		n
+	]).slice(0, 56), H = async (e, n, r, i = !1) => {
+		A(r);
+		let a = S(c).where(m("id", r)).limit(1), o = (await e.query((i ? a.forUpdate() : a).descriptor))[0];
+		if (!o || o.tenantId !== n) throw t("not_found");
+		return o;
+	}, U = async (e, n, r, i) => {
+		let a = (await e.query(S(l).where(m("id", V(n, r, i))).limit(1).descriptor))[0];
+		if (!a || a.tenantId !== n || a.channelId !== r || a.subjectId !== i) throw t("forbidden");
+		return a;
+	}, W = async (e, n, r) => {
+		A(r);
+		let i = (await e.query(S(u).where(m("id", r)).limit(1).descriptor))[0];
+		if (!i || i.tenantId !== n) throw t("not_found");
+		return i;
+	}, G = (e, t) => "cadm_" + E([e, t]).slice(0, 56), se = async (e, t) => {
+		A(e);
+		for (let r of [...new Set(t)].sort()) A(r), await w.insertIgnore(n.tableName, {
+			id: G(e, r),
+			tenantId: e,
+			subjectId: r,
+			admission: 0,
+			erased: !1
+		}, { conflictColumns: ["id"] });
+	}, ce = async (e, r, i, a = !1) => {
+		for (let o of i) {
+			let i = (await e.query(S(n).where(m("id", G(r, o))).limit(1).descriptor))[0];
+			if (i) {
+				if (i.tenantId !== r || !F(i.erased) && i.subjectId !== o) throw t("unavailable");
+				if (F(i.erased) && !a) throw t("identity_required");
+			}
+		}
+	}, le = async (e, r, i) => {
+		let a = [...new Set(i)].sort((e, t) => G(r, e) < G(r, t) ? -1 : 1);
+		for (let i of a) if (await e.updateMany(n.tableName, { admission: 0 }, { where: m("id", G(r, i)) }) !== 1) throw t("unavailable");
+		return a;
+	}, ue = async (e, t, n, r = !1) => ce(e, t, await le(e, t, n), r), K = async (e, n, r, i = []) => (i.length && await se(e, i), w.transactional(async (a) => {
+		let o = i.length ? await le(a, e, i) : [];
+		if (await a.updateMany(c.tableName, { admission: 0 }, { where: m("id", n) }) !== 1) throw t("not_found");
+		return await ce(a, e, o), r(a, await H(a, e, n, !0));
+	})), q = async (e, n, r) => {
+		if (!e || n.id === r) return !1;
+		try {
+			return await d.runPromise(e.isBlocked(n, r));
+		} catch {
+			throw t("unavailable");
+		}
+	}, J = d.serviceOption(ie).pipe(d.map((e) => e._tag === "Some" ? e.value : void 0)), de = d.serviceOption(C).pipe(d.map((e) => e._tag === "Some" ? e.value : void 0)), Y = d.all([d.serviceOption(T), d.serviceOption(re)]).pipe(d.map(([e, t]) => ({
+		...e._tag === "Some" ? { guild: e.value } : {},
+		...t._tag === "Some" ? { party: t.value } : {}
+	}))), fe = (e, t) => t.kind === "guild" ? e.guild : t.kind === "party" ? e.party : void 0, X = async (e, n, r, i) => {
+		let a = fe(e, r);
+		if (!a) return;
+		let o;
+		try {
+			o = await d.runPromise(a.isMember({
+				type: "user",
+				id: i,
+				tenantId: n
+			}, P(r, "refId")));
+		} catch {
+			throw t("unavailable");
+		}
+		if (o !== !0) throw t("forbidden");
+	}, pe = async (t, n, r, i) => {
+		try {
+			return await X(t, n, r, i), !0;
+		} catch (t) {
+			if (t instanceof e && t.code === "forbidden") return !1;
+			throw t;
+		}
+	}, Z = async (e) => {
+		try {
+			return {
+				ok: !0,
+				value: await e()
+			};
+		} catch (e) {
+			return {
+				ok: !1,
+				error: e
+			};
+		}
+	}, Q = (e) => {
+		if (!e) throw t("unavailable");
+		if (!e.ok) throw e.error;
+		return e.value;
+	}, me = (e, t) => "cmed_" + E([e, t]).slice(0, 56), he = (e) => E(e.mediaId === void 0 ? [e.body, e.replyToId ?? null] : [
+		e.body,
+		e.replyToId ?? null,
+		e.mediaId
+	]), ge = (e, n) => d.gen(function* () {
+		let r = yield* de;
+		if (!r) return yield* d.fail(t("forbidden"));
+		let i = yield* d.suspend(() => r.head(n, { tenantId: e.tenantId })).pipe(d.mapError(() => t("unavailable")), d.catchDefect(() => d.fail(t("unavailable"))));
+		if (i === null) return yield* d.fail(t("not_found"));
+		let a = yield* k(() => {
+			if (i.id !== n || i.tenantId !== e.tenantId || i.ownerId !== e.id || (i.derivedFrom ?? null) !== null || i.passwordHash !== null) throw t("forbidden");
+			let r = (e) => {
+				if (e == null) return null;
+				if (!Number.isSafeInteger(e) || e < 0) throw t("unavailable");
+				return e;
+			};
+			if (typeof i.contentType != "string" || !Number.isSafeInteger(i.size) || i.size < 0) throw t("unavailable");
+			return {
+				id: i.id,
+				contentType: i.contentType,
+				size: i.size,
+				width: r(i.width),
+				height: r(i.height)
+			};
+		}), o = yield* d.suspend(() => z.strategies.moderateMedia({
+			subject: e,
+			ref: a,
+			contentTypes: z.mediaContentTypes,
+			maxBytes: z.maxMediaBytes
+		})).pipe(d.catchDefect(() => d.fail(t("unavailable"))));
+		return o.allowed === !0 ? typeof o.flagged == "boolean" ? {
+			media: a,
+			flagged: o.flagged
+		} : yield* d.fail(t("unavailable")) : yield* d.fail(t("content_rejected"));
+	}), _e = (e, n) => d.gen(function* () {
+		let r = yield* d.serviceOption(te);
+		if (r._tag !== "None" && (yield* d.suspend(() => r.value.check(e, "chat", { channelId: n })).pipe(d.mapError(() => t("unavailable")), d.catchDefect(() => d.fail(t("unavailable"))))).allowed !== !0) return yield* d.fail(t("sanctioned"));
+	}), ve = (e) => d.suspend(() => z.strategies.moderate({
+		body: e,
+		denyWords: z.denyWords,
+		action: z.moderationAction
+	})).pipe(d.flatMap((e) => e.allowed === !0 ? k(() => {
+		if (oe(e.body), typeof e.flagged != "boolean") throw t("unavailable");
+		return e;
+	}) : d.fail(t("content_rejected"))), d.catchDefect(() => d.fail(t("unavailable")))), $ = (e) => {
+		let n = z.strategies.retention(I(e));
+		if (n !== null && (!Number.isSafeInteger(n) || n < 1 || n > 31536e7)) throw t("unavailable");
+		return n;
+	}, ye = s({
+		store: w,
+		now: B,
+		options: z,
+		limiter: ae,
+		social: J,
+		sanctioned: _e,
+		readAccess: (t, n, r) => Y.pipe(d.flatMap((i) => O(async () => {
+			let a = j(t), o = await w.transactional(async (t) => {
+				let i = await H(t, a.tenantId, n), o = await U(t, a.tenantId, n, a.id), s = null;
+				if (r !== void 0) {
+					A(r);
+					try {
+						s = L(await U(t, a.tenantId, n, r));
+					} catch (t) {
+						if (!(t instanceof e) || t.code !== "forbidden") throw t;
+					}
+				}
+				return {
+					current: i,
+					own: o,
+					peer: s
+				};
+			});
+			await X(i, a.tenantId, o.current, a.id);
+			let s = o.peer !== null && r !== void 0 && !await pe(i, a.tenantId, o.current, r) ? null : o.peer;
+			return {
+				channel: I(o.current),
+				member: L(o.own),
+				peer: s
+			};
+		})))
+	}), be = {
+		prepareTyping: ye.prepare,
+		mentionCandidates: (e, n) => {
+			let r, i;
+			try {
+				r = structuredClone(j(e)), i = structuredClone(n), A(i.channelId), i.after !== void 0 && A(i.after);
+			} catch (e) {
+				return d.fail(D(e));
+			}
+			return d.gen(function* () {
+				let e = j(r), n = yield* Y, a = yield* O(async () => {
+					let r = await H(w, e.tenantId, i.channelId);
+					await U(w, e.tenantId, i.channelId, e.id), await X(n, e.tenantId, r, e.id);
+					let a = await w.query(S(l).where(p(m("tenantId", e.tenantId), m("channelId", i.channelId), ...i.after === void 0 ? [] : [h("id", i.after)])).orderBy("id", "asc").limit(129).descriptor);
+					if (a.some((t) => t.tenantId !== e.tenantId || t.channelId !== i.channelId)) throw t("unavailable");
+					return a;
+				}), o = a.slice(0, 128);
+				return {
+					authors: yield* be.authors(e, {
+						channelId: i.channelId,
+						subjectIds: o.map((e) => P(e, "subjectId"))
+					}),
+					after: a.length > 128 ? P(o[o.length - 1], "id") : null
+				};
+			}).pipe(d.catchDefect(() => d.fail(t("unavailable"))));
+		},
+		authors: (n, r) => {
+			let i, a, o;
+			try {
+				if (i = structuredClone(j(n)), a = r.channelId, A(a), !Array.isArray(r.subjectIds) || r.subjectIds.length > 128 || (o = [...r.subjectIds], o.forEach(A), new Set(o).size !== o.length)) throw t("invalid_input");
+			} catch (e) {
+				return d.fail(D(e));
+			}
+			return d.gen(function* () {
+				let n = j(i), r = yield* J, s = yield* d.serviceOption(ne), c = yield* Y, l = async (t) => {
+					let i = await H(w, n.tenantId, a);
+					await U(w, n.tenantId, a, n.id), await X(c, n.tenantId, i, n.id);
+					try {
+						await U(w, n.tenantId, a, t);
+					} catch (t) {
+						if (t instanceof e && t.code === "forbidden") return !1;
+						throw t;
+					}
+					return await pe(c, n.tenantId, i, t) ? !await q(r, n, t) : !1;
+				};
+				if (yield* O(async () => {
+					let e = await H(w, n.tenantId, a);
+					await U(w, n.tenantId, a, n.id), await X(c, n.tenantId, e, n.id);
+				}), s._tag === "None") return [];
+				let u = [];
+				for (let e of o) {
+					if (!(yield* O(() => l(e)))) continue;
+					let r = yield* d.suspend(() => s.value.resolveMember(n, e)).pipe(d.mapError(() => t("unavailable")), d.catchDefect(() => d.fail(t("unavailable"))));
+					r !== null && (yield* k(() => {
+						if (typeof r.displayName != "string" || !r.displayName.trim() || r.displayName.length > 256 || r.avatar !== null && (typeof r.avatar != "string" || r.avatar.length > 2048)) throw t("unavailable");
+					}), (yield* O(() => l(e))) && u.push({
+						subjectId: e,
+						displayName: r.displayName,
+						avatar: r.avatar
+					}));
+				}
+				let f = [];
+				for (let e of u) (yield* O(() => l(e.subjectId))) && f.push(e);
+				return yield* O(async () => {
+					await H(w, n.tenantId, a), await U(w, n.tenantId, a, n.id);
+				}), f;
+			});
+		},
+		dm: (e, n) => d.gen(function* () {
+			let r = yield* k(() => {
+				let r = j(e);
+				if (A(n), r.id === n) throw t("invalid_input");
+				return r;
+			}), i = yield* J;
+			if (!i) return yield* d.fail(t("forbidden"));
+			if (!(yield* i.canMessage(r, n).pipe(d.mapError(() => t("unavailable"))))) return yield* d.fail(t("blocked"));
+			let a = [r.id, n].sort();
+			return yield* De({
+				type: "serviceAccount",
+				id: "chat:dm",
+				tenantId: r.tenantId,
+				scopes: ["chat:channels:write"]
+			}, {
+				tenantId: r.tenantId,
+				kind: "dm",
+				refId: E([r.tenantId, a]),
+				name: "",
+				maxMembers: 2,
+				members: a.map((e) => ({
+					subjectId: e,
+					role: "member"
+				}))
+			});
+		}),
+		send: (e, n) => d.gen(function* () {
+			let r = yield* k(() => {
+				let t = j(e);
+				return A(n.channelId), A(n.requestId), (n.mediaId === void 0 || n.body !== "") && oe(n.body), n.mediaId !== void 0 && A(n.mediaId), t;
+			}), i = yield* O(async () => {
+				let e = "cmsg_" + E([
+					r.tenantId,
+					n.channelId,
+					r.id,
+					n.requestId
+				]).slice(0, 56), i = (await w.query(S(u).where(m("id", e)).limit(1).descriptor))[0];
+				if (!i) return null;
+				if (await U(w, r.tenantId, n.channelId, r.id), i.tenantId !== r.tenantId || i.channelId !== n.channelId || i.authorId !== r.id || i.requestKey !== he(n)) throw t("conflict");
+				return R(i);
+			});
+			if (i !== null) return i;
+			let o = yield* J, s = yield* O(() => H(w, r.tenantId, n.channelId));
+			yield* O(() => U(w, r.tenantId, n.channelId, r.id));
+			let c = n.body === "" ? {
+				body: "",
+				flagged: !1
+			} : yield* ve(n.body), f = n.body === "" ? [] : yield* d.suspend(() => z.strategies.mentionResolver({
+				body: c.body,
+				subject: r,
+				maxMentions: z.maxMentions
+			})).pipe(d.catchDefect(() => d.fail(t("unavailable"))));
+			yield* k(() => {
+				if (f.length > z.maxMentions || new Set(f).size !== f.length) throw t("invalid_input");
+				f.forEach(A);
+			});
+			let p = yield* k(() => {
+				let e = z.strategies.rateLimit({
+					channel: I(s),
+					perChannel: z.perChannelRate,
+					global: z.globalRate
+				});
+				if (![e.perChannel, e.global].every((e) => Number.isSafeInteger(e) && e > 0 && e <= 1e4)) throw t("unavailable");
+				return e;
+			});
+			for (let [e, i] of [[E([
+				r.tenantId,
+				r.id,
+				n.channelId
+			]), p.perChannel], [E([r.tenantId, r.id]), p.global]]) {
+				let n = yield* ae.consume("chat:send:" + e, {
+					limit: i,
+					windowMs: 1e3,
+					algorithm: "fixed-window",
+					burst: i
+				}, B()).pipe(d.catchDefect(() => d.fail(t("unavailable"))));
+				if (n.failOpenReason !== void 0) return yield* d.fail(t("unavailable"));
+				if (!n.allowed) return yield* d.fail(t("rate_limited"));
+			}
+			yield* _e(r, n.channelId);
+			let h = yield* Y, g = n.mediaId === void 0 ? null : yield* ge(r, n.mediaId), _ = yield* O(async () => {
+				let e = /* @__PURE__ */ new Map(), i = /* @__PURE__ */ new Map(), a = async (e) => {
+					i.has(e) || i.set(e, await Z(() => q(o, r, e)));
+				};
+				e.set(r.id, await Z(() => X(h, r.tenantId, s, r.id)));
+				let c, u;
+				if (s.kind === "dm" && o) {
+					let e = (await w.query(S(l).where(m("channelId", n.channelId)).limit(3).descriptor)).find((e) => e.tenantId === r.tenantId && e.subjectId !== r.id);
+					if (e) {
+						let n = P(e, "subjectId");
+						c = n, await a(n), u = await Z(async () => {
+							try {
+								return await d.runPromise(o.canMessage(r, n));
+							} catch {
+								throw t("unavailable");
+							}
+						});
+					}
+				}
+				if (n.replyToId !== void 0) {
+					let e = await Z(() => W(w, r.tenantId, n.replyToId));
+					e.ok && e.value.authorId !== null && await a(P(e.value, "authorId"));
+				}
+				for (let t of f) e.set(t, await Z(() => X(h, r.tenantId, s, t))), await a(t);
+				return {
+					roster: e,
+					block: i,
+					recipientId: c,
+					canMessage: u
+				};
+			});
+			return yield* O(() => K(r.tenantId, n.channelId, async (e, i) => {
+				let s = await U(e, r.tenantId, n.channelId, r.id), d = B();
+				Q(_.roster.get(r.id));
+				let p = "cmsg_" + E([
+					r.tenantId,
+					n.channelId,
+					r.id,
+					n.requestId
+				]).slice(0, 56), h = (await e.query(S(u).where(m("id", p)).limit(1).descriptor))[0];
+				if (h) {
+					if (h.tenantId !== r.tenantId || h.channelId !== n.channelId || h.authorId !== r.id || h.requestKey !== he(n)) throw t("conflict");
+					return R(h);
+				}
+				if (F(i.frozen)) throw t("frozen");
+				if (s.mutedUntil !== null && M(s.mutedUntil) > d) throw t("muted");
+				if (s.lastSentAt !== null && d - M(s.lastSentAt) < Number(i.slowModeMs)) throw t("slow_mode");
+				if (i.kind === "dm") {
+					let i = await e.query(S(l).where(m("channelId", n.channelId)).limit(3).descriptor);
+					if (i.length !== 2 || i.some((e) => e.tenantId !== r.tenantId)) throw t("unavailable");
+					let a = i.find((e) => e.subjectId !== r.id);
+					if (!a || !o) throw t("forbidden");
+					let s = P(a, "subjectId");
+					if (s !== _.recipientId) throw t("unavailable");
+					if (Q(_.block.get(s))) throw t("blocked");
+					if (!Q(_.canMessage)) throw t("forbidden");
+				}
+				if (n.replyToId !== void 0) {
+					let i = await W(e, r.tenantId, n.replyToId);
+					if (i.channelId !== n.channelId || i.deletedAt !== null || i.authorId !== null && Q(_.block.get(P(i, "authorId")))) throw t("forbidden");
+				}
+				for (let i of f) if (await U(e, r.tenantId, n.channelId, i), Q(_.roster.get(i)), Q(_.block.get(i))) throw t("blocked");
+				let v = await e.insert(u.tableName, {
+					id: p,
+					tenantId: r.tenantId,
+					channelId: n.channelId,
+					authorId: r.id,
+					requestKey: he(n),
+					kind: g ? "media" : "text",
+					body: c.body,
+					originalBody: c.body,
+					payload: g ? {
+						mentions: [...f],
+						media: g.media
+					} : { mentions: [...f] },
+					replyToId: n.replyToId ?? null,
+					editedAt: null,
+					deletedAt: null,
+					flagged: c.flagged || g?.flagged === !0,
+					createdAt: new Date(d),
+					version: 0,
+					metadata: {}
+				});
+				return g && await e.insert(a.tableName, {
+					id: me(r.tenantId, p),
+					tenantId: r.tenantId,
+					channelId: n.channelId,
+					messageId: p,
+					storageId: g.media.id,
+					ownerId: r.id,
+					state: "active",
+					createdAt: new Date(d)
+				}), await e.update(l.tableName, V(r.tenantId, n.channelId, r.id), { lastSentAt: new Date(d) }), R(v);
+			}));
+		}),
+		edit: (e, n) => d.gen(function* () {
+			let r = yield* k(() => {
+				let r = j(e);
+				if (oe(n.body), !Number.isSafeInteger(n.baseVersion) || n.baseVersion < 0 || n.baseVersion >= 2147483647) throw t("invalid_input");
+				return r;
+			}), i = yield* ve(n.body), a = yield* J, o = yield* O(() => W(w, r.tenantId, n.messageId));
+			return yield* _e(r, P(o, "channelId")), yield* O(async () => {
+				let e = /* @__PURE__ */ new Map();
+				for (let t of await w.query(S(l).where(m("channelId", P(o, "channelId"))).limit(3).descriptor)) {
+					let n = P(t, "subjectId");
+					n !== r.id && e.set(n, await Z(() => q(a, r, n)));
+				}
+				return K(r.tenantId, P(o, "channelId"), async (a, o) => {
+					let s = await U(a, r.tenantId, P(o, "id"), r.id), c = await W(a, r.tenantId, n.messageId);
+					if (c.authorId !== r.id || c.deletedAt !== null) throw t("forbidden");
+					if (F(o.frozen)) throw t("frozen");
+					if (s.mutedUntil !== null && M(s.mutedUntil) > B()) throw t("muted");
+					if (o.kind === "dm") {
+						let n = await a.query(S(l).where(m("channelId", o.id)).limit(3).descriptor);
+						for (let i of n) if (i.subjectId !== r.id && Q(e.get(P(i, "subjectId")))) throw t("blocked");
+					}
+					if (c.version !== n.baseVersion) throw t("conflict");
+					let d = await a.update(u.tableName, n.messageId, {
+						body: i.body,
+						flagged: i.flagged,
+						payload: c.kind === "media" && typeof c.payload == "object" && c.payload !== null ? { media: c.payload.media } : {},
+						editedAt: new Date(B()),
+						version: n.baseVersion + 1
+					});
+					if (!d) throw t("unavailable");
+					return R(d);
+				});
+			});
+		}),
+		remove: (e, n) => O(async () => {
+			let r = j(e);
+			if (!Number.isSafeInteger(n.baseVersion) || n.baseVersion < 0 || n.baseVersion >= 2147483647) throw t("invalid_input");
+			let i = await W(w, r.tenantId, n.messageId);
+			return K(r.tenantId, P(i, "channelId"), async (e, i) => {
+				let a = await U(e, r.tenantId, P(i, "id"), r.id), o = await W(e, r.tenantId, n.messageId);
+				if (o.authorId !== r.id && a.role !== "mod" && a.role !== "owner") throw t("forbidden");
+				if (o.deletedAt !== null) return R(o);
+				if (o.version !== n.baseVersion) throw t("conflict");
+				let s = await e.update(u.tableName, n.messageId, {
+					deletedAt: new Date(B()),
+					version: n.baseVersion + 1
+				});
+				if (!s) throw t("unavailable");
+				return R(s);
+			});
+		}),
+		messages: (e, n) => d.gen(function* () {
+			let r = yield* k(() => j(e)), i = yield* J, a = yield* Y;
+			return yield* O(async () => {
+				let e = await H(w, r.tenantId, n.channelId);
+				await U(w, r.tenantId, n.channelId, r.id), await X(a, r.tenantId, e, r.id);
+				let o = n.before;
+				if (o !== void 0 && (A(o.id), !Number.isSafeInteger(o.at) || o.at < 0 || o.at > B())) throw t("invalid_input");
+				let s = $(e), c = p(m("tenantId", r.tenantId), m("channelId", n.channelId), ...s === null ? [] : [g("createdAt", new Date(Math.max(0, B() - s)))], ...o === void 0 ? [] : [x(y("createdAt", new Date(o.at)), p(m("createdAt", new Date(o.at)), y("id", o.id)))]), l = await w.query(S(u).where(c).orderBy("createdAt", "desc").orderBy("id", "desc").limit(z.pageSize).descriptor), d = [];
+				for (let e of l) {
+					if (e.tenantId !== r.tenantId || e.channelId !== n.channelId) throw t("unavailable");
+					e.authorId !== null && await q(i, r, P(e, "authorId")) || d.push(R(e));
+				}
+				let f = l.at(-1);
+				return {
+					messages: d,
+					before: l.length === z.pageSize && f ? {
+						at: M(f.createdAt),
+						id: P(f, "id")
+					} : null
+				};
+			});
+		}),
+		channel: (e, t) => d.gen(function* () {
+			let n = yield* k(() => j(e)), r = yield* Y;
+			return yield* O(async () => {
+				let e = await H(w, n.tenantId, t);
+				return await U(w, n.tenantId, t, n.id), await X(r, n.tenantId, e, n.id), I(e);
+			});
+		}),
+		membership: (e, t) => d.gen(function* () {
+			let n = yield* k(() => j(e)), r = yield* Y;
+			return yield* O(async () => {
+				let e = await w.transactional(async (e) => ({
+					row: await H(e, n.tenantId, t),
+					own: L(await U(e, n.tenantId, t, n.id))
+				}));
+				return await X(r, n.tenantId, e.row, n.id), e.own;
+			});
+		}),
+		channels: (e) => d.gen(function* () {
+			let n = yield* k(() => j(e)), r = yield* Y;
+			return yield* O(async () => {
+				let e = await w.query(S(l).where(p(m("tenantId", n.tenantId), m("subjectId", n.id))).orderBy("id", "asc").limit(z.maxChannelsPerSubject + 1).descriptor);
+				if (e.length > z.maxChannelsPerSubject) throw t("unavailable");
+				let i = [];
+				for (let a of e) {
+					if (a.tenantId !== n.tenantId || a.subjectId !== n.id) throw t("unavailable");
+					let e = await H(w, n.tenantId, P(a, "channelId"));
+					await pe(r, n.tenantId, e, n.id) && i.push(I(e));
+				}
+				return i;
+			});
+		}),
+		unread: (e) => d.gen(function* () {
+			let n = yield* k(() => j(e)), r = yield* J, i = yield* Y;
+			return yield* O(async () => {
+				let e = await w.transactional(async (e) => {
+					let r = await e.query(S(l).where(p(m("tenantId", n.tenantId), m("subjectId", n.id))).orderBy("id", "asc").limit(z.maxChannelsPerSubject + 1).descriptor);
+					if (r.length > z.maxChannelsPerSubject) throw t("unavailable");
+					let i = [];
+					for (let a of r) {
+						if (a.tenantId !== n.tenantId || a.subjectId !== n.id) throw t("unavailable");
+						let r = P(a, "channelId"), o = await H(e, n.tenantId, r), s = $(o), c = M(a.lastReadAt), l = a.lastReadId === null ? g("createdAt", new Date(c)) : x(h("createdAt", new Date(c)), p(m("createdAt", new Date(c)), h("id", P(a, "lastReadId")))), d = await e.query(S(u).where(p(m("tenantId", n.tenantId), m("channelId", r), l, ...s === null ? [] : [g("createdAt", new Date(Math.max(0, B() - s)))])).orderBy("createdAt", "asc").orderBy("id", "asc").limit(z.maxExportRows + 1).descriptor);
+						for (let e of d.slice(0, z.maxExportRows)) if (e.tenantId !== n.tenantId || e.channelId !== r) throw t("unavailable");
+						i.push({
+							channelId: r,
+							c: o,
+							candidates: d
+						});
+					}
+					return i;
+				}), a = [];
+				for (let { channelId: t, c: o, candidates: s } of e) {
+					if (!await pe(i, n.tenantId, o, n.id)) continue;
+					let e = 0;
+					for (let t of s.slice(0, z.maxExportRows)) t.deletedAt !== null || t.authorId === n.id || t.authorId !== null && await q(r, n, P(t, "authorId")) || e++;
+					a.push({
+						channelId: t,
+						count: e,
+						truncated: s.length > z.maxExportRows
+					});
+				}
+				return a;
+			});
+		}),
+		original: (e, n) => O(() => w.transactional(async (r) => {
+			let i = j(e), a = await W(r, i.tenantId, n), o = await U(r, i.tenantId, P(a, "channelId"), i.id);
+			if (await H(r, i.tenantId, P(a, "channelId")), o.role !== "owner" && o.role !== "mod") throw t("forbidden");
+			return {
+				message: R(a, !0),
+				originalBody: P(a, "originalBody")
+			};
+		})),
+		mediaUrl: (e, n) => d.gen(function* () {
+			let r = yield* k(() => j(e)), i = yield* J, o = yield* de, s = yield* Y, c = yield* O(async () => {
+				let e = await W(w, r.tenantId, n), o = P(e, "channelId"), c = await H(w, r.tenantId, o), l = await U(w, r.tenantId, o, r.id);
+				if (e.kind !== "media" || (await X(s, r.tenantId, c, r.id), e.deletedAt !== null && l.role !== "mod" && l.role !== "owner")) throw t("not_found");
+				let u = $(c);
+				if (u !== null && M(e.createdAt) < B() - u) throw t("not_found");
+				if (e.authorId !== null && await q(i, r, P(e, "authorId"))) throw t("forbidden");
+				let d = (await w.query(S(a).where(m("id", me(r.tenantId, n))).limit(1).descriptor))[0];
+				if (!d || d.state !== "active") throw t("not_found");
+				if (d.tenantId !== r.tenantId || d.messageId !== n || d.channelId !== o) throw t("unavailable");
+				return P(d, "storageId");
+			});
+			if (!o) return yield* d.fail(t("unavailable"));
+			let l = yield* k(B), u = yield* d.suspend(() => o.head(c, { tenantId: r.tenantId })).pipe(d.mapError(() => t("unavailable")), d.catchDefect(() => d.fail(t("unavailable"))));
+			return u === null || u.tenantId !== r.tenantId ? yield* d.fail(t("not_found")) : {
+				url: yield* d.suspend(() => o.getUrl(c, {
+					tenantId: r.tenantId,
+					expiresInSec: z.mediaUrlTtlSec
+				})).pipe(d.mapError(() => t("unavailable")), d.catchDefect(() => d.fail(t("unavailable")))),
+				expiresAt: l + z.mediaUrlTtlSec * 1e3
+			};
+		}),
+		markRead: (e, n, r) => O(async () => {
+			let i = j(e);
+			return K(i.tenantId, n, async (e) => {
+				let a = await U(e, i.tenantId, n, i.id), o = await W(e, i.tenantId, r);
+				if (o.channelId !== n) throw t("forbidden");
+				let s = M(a.lastReadAt), c = M(o.createdAt), u = P(o, "id");
+				if (c < s || c === s && a.lastReadId !== null && u <= P(a, "lastReadId")) return L(a);
+				let d = await e.update(l.tableName, P(a, "id"), {
+					lastReadAt: new Date(c),
+					lastReadId: u
+				});
+				if (!d) throw t("unavailable");
+				return L(d);
+			});
+		}),
+		moderateMember: (e, n) => O(async () => {
+			let r = j(e);
+			return K(r.tenantId, n.channelId, async (e) => {
+				let i = await U(e, r.tenantId, n.channelId, r.id), a = await U(e, r.tenantId, n.channelId, n.subjectId);
+				if (i.role !== "owner" && (i.role !== "mod" || a.role !== "member")) throw t("forbidden");
+				if (a.role === "owner" || n.mutedUntil !== null && (!Number.isSafeInteger(n.mutedUntil) || n.mutedUntil < B() || n.mutedUntil > B() + 31536e6)) throw t("invalid_input");
+				let o = await e.update(l.tableName, P(a, "id"), { mutedUntil: n.mutedUntil === null ? null : new Date(n.mutedUntil) });
+				if (!o) throw t("unavailable");
+				return L(o);
+			});
+		}),
+		configure: (e, n) => O(async () => {
+			let r = j(e);
+			return K(r.tenantId, n.channelId, async (e, i) => {
+				let a = await U(e, r.tenantId, n.channelId, r.id);
+				if (a.role !== "mod" && a.role !== "owner") throw t("forbidden");
+				if (n.slowModeMs !== void 0 && (!Number.isSafeInteger(n.slowModeMs) || n.slowModeMs < 0 || n.slowModeMs > 864e5) || n.frozen !== void 0 && typeof n.frozen != "boolean") throw t("invalid_input");
+				let o = await e.update(c.tableName, P(i, "id"), {
+					slowModeMs: n.slowModeMs ?? i.slowModeMs,
+					frozen: n.frozen ?? F(i.frozen)
+				});
+				if (!o) throw t("unavailable");
+				return I(o);
+			});
+		}),
+		join: (e, n) => d.gen(function* () {
+			let r = yield* k(() => {
+				let t = j(e);
+				return A(n), t;
+			});
+			yield* _e(r, n);
+			let i = yield* Y, a = yield* O(async () => {
+				let e = await Z(() => H(w, r.tenantId, n));
+				return e.ok ? Z(() => X(i, r.tenantId, e.value, r.id)) : void 0;
+			});
+			return yield* O(() => K(r.tenantId, n, async (e, o) => {
+				if (o.kind !== "global" && fe(i, o) === void 0) throw t("forbidden");
+				if (Q(a), F(o.frozen)) throw t("frozen");
+				let s = V(r.tenantId, n, r.id), c = (await e.query(S(l).where(m("id", s)).limit(1).forUpdate().descriptor))[0];
+				if (c) {
+					if (c.tenantId !== r.tenantId || c.channelId !== n || c.subjectId !== r.id) throw t("unavailable");
+					return L(c);
+				}
+				let u = await e.query(S(l).where(p(m("tenantId", r.tenantId), m("channelId", n))).limit(Number(o.maxMembers) + 1).forUpdate().descriptor);
+				if (u.some((e) => e.tenantId !== r.tenantId || e.channelId !== n)) throw t("unavailable");
+				if (u.length >= Number(o.maxMembers)) throw t("member_limit");
+				return L(await e.insert(l.tableName, {
+					id: s,
+					tenantId: r.tenantId,
+					channelId: n,
+					subjectId: r.id,
+					role: "member",
+					mutedUntil: null,
+					lastReadAt: /* @__PURE__ */ new Date(0),
+					lastReadId: null,
+					lastSentAt: null,
+					notify: !0,
+					metadata: {}
+				}));
+			}, [r.id]));
+		}),
+		leave: (e, n) => O(async () => {
+			let r = j(e);
+			return K(r.tenantId, n, async (e, i) => {
+				if (i.kind === "dm") throw t("forbidden");
+				let a = (await e.query(S(l).where(m("id", V(r.tenantId, n, r.id))).limit(1).descriptor))[0];
+				if (a) {
+					if (a.tenantId !== r.tenantId || a.channelId !== n || a.subjectId !== r.id) throw t("unavailable");
+					if (a.role === "owner") throw t("forbidden");
+					await e.delete(l.tableName, P(a, "id"));
+				}
+			});
+		}),
+		transferOwnership: (e, n, r) => O(async () => {
+			let i = j(e);
+			return A(r), K(i.tenantId, n, async (e, a) => {
+				if (a.kind === "dm") throw t("forbidden");
+				let o = await U(e, i.tenantId, n, i.id);
+				if (o.role !== "owner") throw t("forbidden");
+				if (r === i.id) return;
+				let s = await U(e, i.tenantId, n, r), c = await e.query(S(l).where(p(m("tenantId", i.tenantId), m("channelId", n), m("role", "owner"))).limit(2).descriptor);
+				if (c.length !== 1 || c[0]?.subjectId !== i.id) throw t("conflict");
+				if (s.mutedUntil !== null && M(s.mutedUntil) > B()) throw t("muted");
+				await e.update(l.tableName, P(o, "id"), { role: "member" }), await e.update(l.tableName, P(s, "id"), { role: "owner" });
+			});
+		})
+	}, xe = (e, n, r) => {
+		if (A(n), e.type !== "system" && !(e.type === "serviceAccount" && e.tenantId === n && e.scopes?.includes(r))) throw t("identity_required");
+	}, Se = (e, n) => {
+		let i, a;
+		try {
+			if (i = structuredClone(j(e)), a = structuredClone(n), A(a.channelId), A(a.messageId), A(a.targetId), i.id === a.targetId) throw t("invalid_input");
+		} catch (e) {
+			return d.fail(D(e));
+		}
+		return O(() => {
+			let e = j(i);
+			return K(e.tenantId, a.channelId, async (n, i) => {
+				await U(n, e.tenantId, a.channelId, e.id);
+				let o = await W(n, e.tenantId, a.messageId), s = B(), c = $(i);
+				if (o.channelId !== a.channelId || o.authorId !== a.targetId || c !== null && M(o.createdAt) < s - c) throw t("forbidden");
+				let l = M(o.createdAt), d = p(m("tenantId", e.tenantId), m("channelId", a.channelId), ...c === null ? [] : [g("createdAt", new Date(Math.max(0, s - c)))]), f = await n.query(S(u).where(p(d, x(y("createdAt", new Date(l)), p(m("createdAt", new Date(l)), y("id", a.messageId))))).orderBy("createdAt", "desc").orderBy("id", "desc").limit(20).select("id", "tenantId", "channelId", "authorId", "kind", "body", "originalBody", "version", "createdAt", "editedAt", "deletedAt").descriptor), _ = await n.query(S(u).where(p(d, x(h("createdAt", new Date(l)), p(m("createdAt", new Date(l)), h("id", a.messageId))))).orderBy("createdAt", "asc").orderBy("id", "asc").limit(20).select("id", "tenantId", "channelId", "authorId", "kind", "body", "originalBody", "version", "createdAt", "editedAt", "deletedAt").descriptor), v = [
+					...[...f].reverse(),
+					o,
+					..._
+				];
+				if (v.some((t) => t.tenantId !== e.tenantId || t.channelId !== a.channelId || !Number.isSafeInteger(t.version) || Number(t.version) < 0)) throw t("unavailable");
+				let b = await W(n, e.tenantId, a.messageId);
+				if (b.version !== o.version || b.authorId !== a.targetId) throw t("conflict");
+				let C = s + z.evidenceRetentionMs;
+				if (!Number.isSafeInteger(C) || C > 864e13) throw t("unavailable");
+				let w = [];
+				for (let i of v) {
+					let o = null;
+					if (i.authorId !== null) {
+						let c = P(i, "id"), l = P(i, "authorId"), u = await n.query(S(r).where(p(m("tenantId", e.tenantId), m("channelId", a.channelId), m("messageId", c), m("messageVersion", i.version), h("expiresAt", new Date(s)))).orderBy("id", "asc").limit(2).descriptor);
+						if (u.length > 1 || u.some((t) => t.tenantId !== e.tenantId || t.channelId !== a.channelId || t.messageId !== c || t.messageVersion !== i.version)) throw t("unavailable");
+						let d = u[0];
+						if (d) {
+							if (d.erasedAt === null && (d.authorId !== l || d.body !== i.body || d.originalBody !== i.originalBody)) throw t("unavailable");
+							o = P(d, "id");
+						} else o = "cevi_" + ee().replaceAll("-", ""), await n.insert(r.tableName, {
+							id: o,
+							tenantId: e.tenantId,
+							channelId: a.channelId,
+							messageId: c,
+							messageVersion: i.version,
+							kind: P(i, "kind"),
+							authorId: l,
+							body: P(i, "body"),
+							originalBody: P(i, "originalBody"),
+							messageCreatedAt: i.createdAt,
+							messageEditedAt: i.editedAt,
+							messageDeletedAt: i.deletedAt,
+							capturedAt: new Date(s),
+							expiresAt: new Date(C),
+							erasedAt: null
+						});
+					}
+					w.push({
+						evidenceId: o,
+						messageId: P(i, "id"),
+						version: Number(i.version),
+						createdAt: M(i.createdAt),
+						deletedAt: N(i.deletedAt)
+					});
+				}
+				return {
+					kind: "chat.context",
+					channelId: a.channelId,
+					anchorMessageId: a.messageId,
+					observedAt: s,
+					messages: w
+				};
+			});
+		});
+	}, Ce = (e, n) => {
+		let i, a;
+		try {
+			if (i = structuredClone(e), a = structuredClone(n), A(a.tenantId), i.type !== "system" && (i.type !== "user" && i.type !== "serviceAccount" || i.tenantId !== a.tenantId || !i.scopes?.includes("sanctions:manage") && !i.scopes?.includes("admin:full"))) throw t("forbidden");
+			if (!Array.isArray(a.evidenceIds) || a.evidenceIds.length > 41 || new Set(a.evidenceIds).size !== a.evidenceIds.length) throw t("invalid_input");
+			a.evidenceIds.forEach(A);
+		} catch (e) {
+			return d.fail(D(e));
+		}
+		return O(async () => {
+			if (!a.evidenceIds.length) return [];
+			let e = await w.query(S(r).where(p(m("tenantId", a.tenantId), _("id", a.evidenceIds))).limit(42).descriptor);
+			if (e.length > 41 || e.some((e) => e.tenantId !== a.tenantId || !a.evidenceIds.includes(P(e, "id")))) throw t("unavailable");
+			return e.filter((e) => M(e.expiresAt) > B()).map((e) => ({
+				id: P(e, "id"),
+				channelId: P(e, "channelId"),
+				messageId: P(e, "messageId"),
+				messageVersion: Number(e.messageVersion),
+				kind: P(e, "kind"),
+				authorId: e.erasedAt === null ? P(e, "authorId") : null,
+				body: e.erasedAt === null ? P(e, "body") : null,
+				originalBody: e.erasedAt === null ? P(e, "originalBody") : null,
+				createdAt: M(e.messageCreatedAt),
+				editedAt: N(e.messageEditedAt),
+				deletedAt: N(e.messageDeletedAt),
+				capturedAt: M(e.capturedAt),
+				expiresAt: M(e.expiresAt),
+				erasedAt: N(e.erasedAt)
+			}));
+		});
+	}, we = (e) => {
+		let n;
+		try {
+			let r = structuredClone(e);
+			if (r.type === "system") n = null;
+			else if (r.type === "serviceAccount" && r.scopes?.includes("chat:retention:write")) A(r.tenantId), n = r.tenantId;
+			else throw t("identity_required");
+		} catch (e) {
+			return d.fail(D(e));
+		}
+		return O(async () => {
+			let e = "cret_" + E(["chat.retention", n]).slice(0, 56), i = S(o).where(m("id", e)).limit(1).descriptor;
+			if (!(await w.query(i))[0]) try {
+				await w.insert(o.tableName, {
+					id: e,
+					tenantId: n,
+					afterChannelId: null,
+					admission: 0,
+					updatedAt: new Date(B())
+				});
+			} catch (e) {
+				let t = (await w.query(i))[0];
+				if (!t || t.tenantId !== n) throw e;
+			}
+			return w.transactional(async (s) => {
+				if (await s.updateMany(o.tableName, { admission: 0 }, { where: m("id", e) }) !== 1) throw t("unavailable");
+				let l = (await s.query(i))[0];
+				if (!l || l.tenantId !== n || l.afterChannelId !== null && typeof l.afterChannelId != "string") throw t("unavailable");
+				let d = await s.query(S(c).where(p(h("id", ""), ...n === null ? [] : [m("tenantId", n)], ...l.afterChannelId === null ? [] : [h("id", l.afterChannelId)])).orderBy("id", "asc").limit(2).select("id", "tenantId").descriptor);
+				if (d.some((e) => typeof e.tenantId != "string" || n !== null && e.tenantId !== n)) throw t("unavailable");
+				let f = d[0];
+				if (!f) return await s.update(o.tableName, e, {
+					afterChannelId: null,
+					updatedAt: new Date(B())
+				}), {
+					deleted: 0,
+					evidenceDeleted: 0,
+					channelId: null,
+					remainingInChannel: !1,
+					evidenceRemainingInChannel: !1,
+					cycleComplete: !0
+				};
+				let g = P(f, "id"), v = P(f, "tenantId");
+				if (A(v), await s.updateMany(c.tableName, { admission: 0 }, { where: m("id", g) }) !== 1) throw t("unavailable");
+				let x = await H(s, v, g), C = $(x), w = 0, ee = !1;
+				if (C !== null) {
+					let e = new Date(Math.max(0, B() - C)), n = await s.query(S(u).where(p(m("tenantId", v), m("channelId", g), y("createdAt", e))).orderBy("createdAt", "asc").orderBy("id", "asc").limit(201).select("id", "tenantId", "channelId").descriptor);
+					if (n.some((e) => e.tenantId !== v || e.channelId !== g || typeof e.id != "string")) throw t("unavailable");
+					ee = n.length > 200;
+					let r = n.slice(0, 200);
+					if (r.length && (w = await s.deleteMany(u.tableName, { where: p(m("tenantId", v), m("channelId", g), y("createdAt", e), _("id", r.map((e) => P(e, "id")))) })), !Number.isSafeInteger(w) || w < 0 || w > r.length) throw t("unavailable");
+					r.length && await s.updateMany(a.tableName, {
+						state: "deleting",
+						ownerId: null
+					}, { where: p(m("tenantId", v), m("channelId", g), _("messageId", r.map((e) => P(e, "id")))) });
+				}
+				let te = await s.query(S(r).where(p(m("tenantId", v), m("channelId", g), b("expiresAt", new Date(B())))).orderBy("expiresAt", "asc").orderBy("id", "asc").limit(201).select("id", "tenantId", "channelId").descriptor);
+				if (te.some((e) => e.tenantId !== v || e.channelId !== g || typeof e.id != "string")) throw t("unavailable");
+				let ne = te.slice(0, 200), T = ne.length ? await s.deleteMany(r.tableName, { where: p(m("tenantId", v), m("channelId", g), b("expiresAt", new Date(B())), _("id", ne.map((e) => P(e, "id")))) }) : 0;
+				if (!Number.isSafeInteger(T) || T < 0 || T > ne.length) throw t("unavailable");
+				let re = d.length < 2;
+				return await s.update(o.tableName, e, {
+					afterChannelId: re ? null : g,
+					updatedAt: new Date(B())
+				}), {
+					deleted: w,
+					evidenceDeleted: T,
+					channelId: g,
+					remainingInChannel: ee,
+					evidenceRemainingInChannel: te.length > 200,
+					cycleComplete: re
+				};
+			});
+		});
+	}, Te = (e) => {
+		let n;
+		try {
+			let r = structuredClone(e);
+			if (r.type === "system") n = null;
+			else if (r.type === "serviceAccount" && r.scopes?.includes("chat:retention:write")) A(r.tenantId), n = r.tenantId;
+			else throw t("identity_required");
+		} catch (e) {
+			return d.fail(D(e));
+		}
+		let r = n;
+		return d.gen(function* () {
+			let e = yield* de, n = yield* O(() => w.query(S(a).where(p(m("state", "deleting"), ...r === null ? [] : [m("tenantId", r)])).orderBy("id", "asc").limit(51).descriptor));
+			if (n.some((e) => e.state !== "deleting" || typeof e.tenantId != "string" || r !== null && e.tenantId !== r)) return yield* d.fail(t("unavailable"));
+			let i = n.slice(0, 50);
+			if (i.length > 0 && !e) return yield* d.fail(t("unavailable"));
+			let o = 0, s = 0;
+			for (let n of i) {
+				let r = P(n, "tenantId"), i = P(n, "storageId");
+				if ((yield* O(() => w.query(S(a).where(p(m("tenantId", r), m("storageId", i), m("state", "active"))).limit(1).descriptor))).length === 0) {
+					let n = yield* d.result(d.suspend(() => e.delete(i, { tenantId: r })).pipe(d.catchDefect(() => d.fail(t("unavailable")))));
+					if (f.isFailure(n) && !("status" in n.failure && n.failure.status === 404)) {
+						s++;
+						continue;
+					}
+				}
+				yield* O(() => w.delete(a.tableName, P(n, "id"))), o++;
+			}
+			return {
+				removed: o,
+				failed: s,
+				remaining: n.length > 50
+			};
+		});
+	}, Ee = (t, n) => {
+		let r, i;
+		try {
+			r = structuredClone(t), i = structuredClone(n), xe(r, i.tenantId, "chat:notifications:send"), A(i.channelId), A(i.messageId), A(i.recipientId);
+		} catch (e) {
+			return d.fail(D(e));
+		}
+		return d.gen(function* () {
+			let t = yield* J;
+			return yield* O(async () => {
+				try {
+					let e = await H(w, i.tenantId, i.channelId), n = await W(w, i.tenantId, i.messageId);
+					if (n.channelId !== i.channelId || n.deletedAt !== null || typeof n.authorId != "string" || n.authorId === i.recipientId) return !1;
+					let r = $(e);
+					if (r !== null && M(n.createdAt) < B() - r) return !1;
+					let a = n.payload, o = a && typeof a == "object" && !Array.isArray(a) ? a.mentions : void 0;
+					if (!Array.isArray(o) || o.length > z.maxMentions || !o.includes(i.recipientId) || !F((await U(w, i.tenantId, i.channelId, i.recipientId)).notify)) return !1;
+					await U(w, i.tenantId, i.channelId, n.authorId);
+					let s = {
+						type: "user",
+						id: i.recipientId,
+						tenantId: i.tenantId
+					};
+					if (await q(t, s, n.authorId)) return !1;
+					let c = await W(w, i.tenantId, i.messageId);
+					if (c.version !== n.version || c.deletedAt !== null || c.authorId !== n.authorId) return !1;
+					await U(w, i.tenantId, i.channelId, n.authorId);
+					let l = $(await H(w, i.tenantId, i.channelId));
+					return l !== null && M(c.createdAt) < B() - l ? !1 : F((await U(w, i.tenantId, i.channelId, i.recipientId)).notify);
+				} catch (t) {
+					if (t instanceof e && (t.code === "not_found" || t.code === "forbidden")) return !1;
+					throw t;
+				}
+			});
+		});
+	}, De = (n, r) => {
+		let i, a;
+		try {
+			i = structuredClone(n), a = structuredClone(r);
+		} catch {
+			return d.fail(t("invalid_input"));
+		}
+		return O(async () => {
+			if (i.type !== "system" && !(i.type === "serviceAccount" && i.tenantId === a.tenantId && i.scopes?.includes("chat:channels:write"))) throw t("identity_required");
+			if (A(a.tenantId), A(a.refId), typeof a.name != "string" || a.name.length > 256 || a.name.includes("\0") || a.kind !== "dm" && !a.name.trim() || ![
+				"global",
+				"lobby",
+				"party",
+				"guild",
+				"match",
+				"dm",
+				"custom"
+			].includes(a.kind) || a.members.length === 0 && ![
+				"global",
+				"guild",
+				"party"
+			].includes(a.kind) || a.members.length > (a.maxMembers ?? z.maxMembers) || !Number.isSafeInteger(a.maxMembers ?? z.maxMembers) || (a.maxMembers ?? z.maxMembers) < 1 || (a.maxMembers ?? z.maxMembers) > z.maxMembers || a.kind === "dm" && a.members.length !== 2 || new Set(a.members.map((e) => e.subjectId)).size !== a.members.length) throw t("invalid_input");
+			a.members.forEach((e) => {
+				if (A(e.subjectId), ![
+					"owner",
+					"mod",
+					"member"
+				].includes(e.role)) throw t("invalid_input");
+			});
+			let n = a.slowModeMs ?? 0, r = a.retentionMs === void 0 ? z.retentionMs : a.retentionMs;
+			if (!Number.isSafeInteger(n) || n < 0 || n > 864e5 || r !== null && (!Number.isSafeInteger(r) || r < 1 || r > 31536e7)) throw t("invalid_input");
+			let o = "cchan_" + E([
+				a.tenantId,
+				a.kind,
+				a.refId
+			]).slice(0, 56), s = E([
+				a.tenantId,
+				a.kind,
+				a.refId,
+				a.name,
+				[...a.members].sort((e, t) => e.subjectId < t.subjectId ? -1 : +(e.subjectId > t.subjectId)),
+				n,
+				r,
+				a.maxMembers ?? z.maxMembers
+			]), u = a.members.map((e) => e.subjectId);
+			await se(a.tenantId, u);
+			try {
+				return await w.transactional(async (e) => {
+					await ue(e, a.tenantId, u);
+					let t = B(), i = await e.insert(c.tableName, {
+						id: o,
+						tenantId: a.tenantId,
+						kind: a.kind,
+						refId: a.refId,
+						name: a.name,
+						slowModeMs: n,
+						retentionMs: r,
+						maxMembers: a.maxMembers ?? z.maxMembers,
+						frozen: !1,
+						createdAt: new Date(t),
+						admission: 0,
+						creationKey: s,
+						metadata: {}
+					});
+					for (let t of a.members) await e.insert(l.tableName, {
+						id: V(a.tenantId, o, t.subjectId),
+						tenantId: a.tenantId,
+						channelId: o,
+						subjectId: t.subjectId,
+						role: t.role,
+						mutedUntil: null,
+						lastReadAt: /* @__PURE__ */ new Date(0),
+						lastReadId: null,
+						lastSentAt: null,
+						notify: !0,
+						metadata: {}
+					});
+					return I(i);
+				});
+			} catch (n) {
+				if (n instanceof e) throw n;
+				await ce(w, a.tenantId, u);
+				let r = (await w.query(S(c).where(m("id", o)).limit(1).descriptor))[0];
+				if (!r) throw n;
+				if (r.tenantId !== a.tenantId || r.kind !== a.kind || r.refId !== a.refId || r.creationKey !== s) throw t("conflict");
+				return I(r);
+			}
+		});
+	}, Oe = (e, n) => {
+		let r, i;
+		try {
+			r = structuredClone(n), i = structuredClone(e);
+		} catch {
+			return d.fail(t("invalid_input"));
+		}
+		return O(async () => {
+			if (xe(i, r.tenantId, "chat:members:write"), A(r.subjectId), r.role !== "member" && r.role !== "mod") throw t("invalid_input");
+			return K(r.tenantId, r.channelId, async (e, n) => {
+				if (n.kind === "dm" || n.kind === "match") throw t("forbidden");
+				if (F(n.frozen)) throw t("frozen");
+				let i = V(r.tenantId, r.channelId, r.subjectId), a = (await e.query(S(l).where(m("id", i)).limit(1).forUpdate().descriptor))[0];
+				if (a) {
+					if (a.tenantId !== r.tenantId || a.channelId !== r.channelId || a.subjectId !== r.subjectId) throw t("unavailable");
+					if (a.role !== r.role) throw t("conflict");
+					return L(a);
+				}
+				let o = await e.query(S(l).where(p(m("tenantId", r.tenantId), m("channelId", r.channelId))).limit(Number(n.maxMembers) + 1).forUpdate().descriptor);
+				if (o.some((e) => e.tenantId !== r.tenantId || e.channelId !== r.channelId)) throw t("unavailable");
+				if (o.length >= Number(n.maxMembers)) throw t("member_limit");
+				return L(await e.insert(l.tableName, {
+					id: i,
+					tenantId: r.tenantId,
+					channelId: r.channelId,
+					subjectId: r.subjectId,
+					role: r.role,
+					mutedUntil: null,
+					lastReadAt: /* @__PURE__ */ new Date(0),
+					lastReadId: null,
+					lastSentAt: null,
+					notify: !0,
+					metadata: {}
+				}));
+			}, [r.subjectId]);
+		});
+	}, ke = (e, n) => {
+		let r, i;
+		try {
+			r = structuredClone(n), i = structuredClone(e);
+		} catch {
+			return d.fail(t("invalid_input"));
+		}
+		return O(async () => (xe(i, r.tenantId, "chat:members:write"), A(r.subjectId), K(r.tenantId, r.channelId, async (e, n) => {
+			if (n.kind === "dm") throw t("forbidden");
+			let i = (await e.query(S(l).where(m("id", V(r.tenantId, r.channelId, r.subjectId))).limit(1).descriptor))[0];
+			if (i) {
+				if (i.tenantId !== r.tenantId || i.channelId !== r.channelId || i.subjectId !== r.subjectId) throw t("unavailable");
+				if (i.role === "owner") throw t("forbidden");
+				await e.delete(l.tableName, P(i, "id"));
+			}
+		})));
+	}, Ae = (n, r) => {
+		let i, a;
+		try {
+			if (i = structuredClone(n), a = structuredClone(r), xe(i, a.tenantId, "chat:archive:write"), A(a.matchId), typeof a.name != "string" || !a.name.trim() || a.name.length > 256 || a.name.includes("\0") || !Array.isArray(a.members) || a.members.length < 1 || a.members.length > z.maxMembers || !Array.isArray(a.messages) || a.messages.length > z.maxExportRows) throw t("invalid_input");
+			let e = /* @__PURE__ */ new Set(), o = /* @__PURE__ */ new Set();
+			for (let n of a.members) {
+				if (A(n.subjectId), e.has(n.subjectId) || ![
+					"member",
+					"mod",
+					"owner"
+				].includes(n.role)) throw t("invalid_input");
+				e.add(n.subjectId);
+			}
+			let s = B();
+			for (let n of a.messages) {
+				if (A(n.id), A(n.authorId), oe(n.body), o.has(n.id) || !e.has(n.authorId) || !Number.isSafeInteger(n.at) || n.at < 0 || n.at > s) throw t("invalid_input");
+				o.add(n.id);
+			}
+			if (a.retentionMs !== void 0 && a.retentionMs !== null && (!Number.isSafeInteger(a.retentionMs) || a.retentionMs < 1 || a.retentionMs > 31536e7)) throw t("invalid_input");
+		} catch (e) {
+			return d.fail(D(e));
+		}
+		let o = a;
+		return d.gen(function* () {
+			let n = o.tenantId, r = "cchan_" + E([
+				n,
+				"match",
+				o.matchId
+			]).slice(0, 56), i = o.retentionMs === void 0 ? z.retentionMs : o.retentionMs, a = o.members.map((e) => ({
+				subjectId: e.subjectId,
+				role: e.role
+			})).sort((e, t) => e.subjectId < t.subjectId ? -1 : +(e.subjectId > t.subjectId)), s = o.messages.map((e) => ({
+				id: e.id,
+				authorId: e.authorId,
+				body: e.body,
+				at: e.at
+			})).sort((e, t) => e.id < t.id ? -1 : +(e.id > t.id)), d = E([
+				"chat:archive:1",
+				n,
+				o.matchId,
+				o.name,
+				a,
+				s,
+				i
+			]), f = async () => {
+				await ce(w, n, a.map((e) => e.subjectId));
+				let e = (await w.query(S(c).where(m("id", r)).limit(1).descriptor))[0];
+				if (!e) return null;
+				if (e.tenantId !== n || e.kind !== "match" || e.refId !== o.matchId || e.creationKey !== d) throw t("conflict");
+				for (let e of s) {
+					let i = "cmsg_" + E([
+						n,
+						r,
+						"archive",
+						e.id
+					]).slice(0, 56), a = (await w.query(S(u).where(m("id", i)).limit(1).descriptor))[0];
+					if (!a || a.tenantId !== n || a.channelId !== r || a.authorId !== e.authorId || a.requestKey !== E([d, e.id])) throw t("conflict");
+				}
+				return I(e);
+			}, p = yield* O(f);
+			if (p !== null) return p;
+			let h = [];
+			for (let e of s) h.push(yield* ve(e.body));
+			return yield* O(async () => {
+				let t = s.map((e, t) => ({
+					entry: e,
+					moderated: h[t]
+				}));
+				await se(n, a.map((e) => e.subjectId));
+				try {
+					return await w.transactional(async (e) => {
+						await ue(e, n, a.map((e) => e.subjectId));
+						let s = await e.insert(c.tableName, {
+							id: r,
+							tenantId: n,
+							kind: "match",
+							refId: o.matchId,
+							name: o.name,
+							slowModeMs: 0,
+							retentionMs: i,
+							maxMembers: a.length,
+							frozen: !0,
+							createdAt: new Date(B()),
+							admission: 0,
+							creationKey: d,
+							metadata: {}
+						});
+						for (let t of a) await e.insert(l.tableName, {
+							id: V(n, r, t.subjectId),
+							tenantId: n,
+							channelId: r,
+							subjectId: t.subjectId,
+							role: t.role,
+							mutedUntil: null,
+							lastReadAt: /* @__PURE__ */ new Date(0),
+							lastReadId: null,
+							lastSentAt: null,
+							notify: !0,
+							metadata: {}
+						});
+						for (let { entry: i, moderated: a } of t) await e.insert(u.tableName, {
+							id: "cmsg_" + E([
+								n,
+								r,
+								"archive",
+								i.id
+							]).slice(0, 56),
+							tenantId: n,
+							channelId: r,
+							authorId: i.authorId,
+							requestKey: E([d, i.id]),
+							kind: "text",
+							body: a.body,
+							originalBody: a.body,
+							payload: {},
+							replyToId: null,
+							editedAt: null,
+							deletedAt: null,
+							flagged: a.flagged,
+							createdAt: new Date(i.at),
+							version: 0,
+							metadata: {}
+						});
+						return I(s);
+					});
+				} catch (t) {
+					if (t instanceof e) throw t;
+					let n = await f();
+					if (n === null) throw t;
+					return n;
+				}
+			});
+		});
+	}, je = async (e, i) => {
+		if (i.tenantId === null) throw t("identity_required");
+		A(i.tenantId), A(i.subjectId);
+		let o = await e.query(S(l).where(p(m("tenantId", i.tenantId), m("subjectId", i.subjectId))).orderBy("id", "asc").limit(z.maxExportRows + 1).descriptor), s = await e.query(S(u).where(p(m("tenantId", i.tenantId), m("authorId", i.subjectId))).orderBy("id", "asc").limit(z.maxExportRows + 1).descriptor), c = await e.query(S(r).where(p(m("tenantId", i.tenantId), m("authorId", i.subjectId))).orderBy("id", "asc").limit(z.maxExportRows + 1).descriptor), d = await e.query(S(a).where(p(m("tenantId", i.tenantId), m("ownerId", i.subjectId))).orderBy("id", "asc").limit(z.maxExportRows + 1).descriptor), f = /* @__PURE__ */ new Map();
+		for (let t = 0; t < 100; t += 20) for (let n of await e.query(S(u).where(p(m("tenantId", i.tenantId), x(...Array.from({ length: 20 }, (e, n) => v("payload", "mentions", t + n).eq(i.subjectId))))).orderBy("id", "asc").limit(z.maxExportRows + 1).descriptor)) f.set(P(n, "id"), n);
+		let h = [...f.values()].sort((e, t) => P(e, "id") < P(t, "id") ? -1 : 1);
+		if (h.length > z.maxExportRows || h.some((e) => e.tenantId !== i.tenantId)) throw t("export_limit");
+		let g = h.filter((e) => e.authorId !== i.subjectId && e.payload && typeof e.payload == "object" && Array.isArray(e.payload.mentions) && e.payload.mentions.includes(i.subjectId)), _ = (await e.query(S(n).where(m("id", G(i.tenantId, i.subjectId))).limit(1).descriptor))[0] ?? null;
+		if (_ && (_.tenantId !== i.tenantId || !F(_.erased) && _.subjectId !== i.subjectId)) throw t("unavailable");
+		let y = _ === null ? 0 : 1;
+		if (o.length + s.length + c.length + g.length + d.length + y > z.maxExportRows) throw t("export_limit");
+		if (o.some((e) => e.tenantId !== i.tenantId || e.subjectId !== i.subjectId) || s.some((e) => e.tenantId !== i.tenantId || e.authorId !== i.subjectId) || c.some((e) => e.tenantId !== i.tenantId || e.authorId !== i.subjectId) || d.some((e) => e.tenantId !== i.tenantId || e.ownerId !== i.subjectId)) throw t("unavailable");
+		let b = new Set(o.filter((e) => e.role === "owner").map((e) => P(e, "channelId"))), C = [];
+		for (let t of b) C.push(await H(e, i.tenantId, t));
+		if (o.length + s.length + c.length + g.length + d.length + C.length + y > z.maxExportRows) throw t("export_limit");
+		return {
+			memberships: o,
+			authored: s,
+			ownedChannels: C,
+			evidence: c,
+			mentioned: g,
+			media: d,
+			admission: _
+		};
+	};
+	return {
+		service: be,
+		typingPolicy: ye.policy,
+		disposeTyping: ye.close,
+		readReportEvidence: Ce,
+		collectReportContext: Se,
+		prune: we,
+		sweepMedia: Te,
+		canNotifyMention: Ee,
+		createChannel: De,
+		addMember: Oe,
+		removeMember: ke,
+		archiveMatch: Ae,
+		exportSubject: (e) => O(() => w.transactional(async (t) => {
+			let n = await je(t, e);
+			return JSON.parse(JSON.stringify({
+				memberships: n.memberships,
+				messages: n.authored,
+				evidence: n.evidence,
+				media: n.media,
+				admission: n.admission === null ? null : (({ admission: e, ...t }) => t)(n.admission),
+				channels: n.ownedChannels.map(({ admission: e, ...t }) => t)
+			}));
+		})),
+		eraseSubject: (e) => {
+			let o;
+			try {
+				o = structuredClone(e);
+			} catch {
+				return d.fail(t("invalid_input"));
+			}
+			return O(async () => {
+				if (o.tenantId === null) throw t("identity_required");
+				A(o.subjectId), A(o.tenantId), await se(o.tenantId, [o.subjectId]);
+				let e = Symbol("chat-erasure-channel-set-changed"), s = (e) => [.../* @__PURE__ */ new Set([
+					...e.memberships.map((e) => P(e, "channelId")),
+					...e.authored.map((e) => P(e, "channelId")),
+					...e.evidence.map((e) => P(e, "channelId")),
+					...e.mentioned.map((e) => P(e, "channelId")),
+					...e.media.map((e) => P(e, "channelId")),
+					...e.ownedChannels.map((e) => P(e, "id"))
+				])].sort();
+				for (let d = 0; d < 4; d++) {
+					let d = s(await je(w, o));
+					try {
+						await w.transactional(async (f) => {
+							await le(f, o.tenantId, [o.subjectId]);
+							let p = [];
+							for (let e of d) {
+								let n = await f.updateMany(c.tableName, { admission: 0 }, { where: m("id", e) });
+								if (n > 1) throw t("unavailable");
+								n === 1 && p.push(e);
+							}
+							await ce(f, o.tenantId, [o.subjectId], !0);
+							for (let e of p) await H(f, o.tenantId, e);
+							let h = await je(f, o);
+							if (s(h).some((e) => !d.includes(e))) throw e;
+							for (let e of h.authored) await f.update(u.tableName, P(e, "id"), {
+								authorId: null,
+								requestKey: "",
+								body: "",
+								originalBody: "",
+								payload: {},
+								metadata: {},
+								deletedAt: new Date(B()),
+								version: Math.min(Number(e.version) + 1, i)
+							});
+							for (let e of h.evidence) await f.update(r.tableName, P(e, "id"), {
+								authorId: null,
+								body: "",
+								originalBody: "",
+								erasedAt: new Date(B())
+							});
+							for (let e of h.mentioned) {
+								let t = e.payload;
+								await f.update(u.tableName, P(e, "id"), {
+									payload: {
+										...t,
+										mentions: t.mentions.filter((e) => e !== o.subjectId)
+									},
+									version: Math.min(Number(e.version) + 1, i)
+								});
+							}
+							for (let e of h.media) await f.update(a.tableName, P(e, "id"), {
+								ownerId: null,
+								state: "deleting"
+							});
+							for (let e of h.memberships) await f.delete(l.tableName, P(e, "id"));
+							for (let e of h.ownedChannels) await f.update(c.tableName, P(e, "id"), {
+								metadata: {},
+								name: ""
+							});
+							await f.update(n.tableName, G(o.tenantId, o.subjectId), {
+								subjectId: null,
+								erased: !0
+							});
+						});
+						return;
+					} catch (t) {
+						if (t !== e) throw t;
+					}
+				}
+				throw t("unavailable");
+			});
+		}
+	};
+};
+export { z as dataStoreChat };